$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a34a1cd9-a6e1-4f90-a908-a66252462eae.roa File: a34a1cd9-a6e1-4f90-a908-a66252462eae.roa (raw, json) Hash identifier: gGDAzg04M9pFb7lhw+DYQPfUpR7t7pNvAOXmwplWaMU= Subject key identifier: BC:EE:BF:0E:FF:25:70:1C:B5:9C:19:03:8E:55:10:D8:73:41:52:A3 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4EBE7CD119824D5A742F7B7669F5D764A92D8B10 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a34a1cd9-a6e1-4f90-a908-a66252462eae.roa Signing time: Wed 25 Jun 2025 00:40:41 +0000 ROA not before: Wed 25 Jun 2025 00:40:41 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:be:7c:d1:19:82:4d:5a:74:2f:7b:76:69:f5:d7:64:a9:2d:8b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:40:41 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=ecd7bf88f0661c29d3629b30061ef931abe2c54470f46e98e68da59cf4b7e49f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:e4:f7:b2:4c:e8:fa:13:1e:c2:1f:6c:7d: f0:d0:f7:c0:0c:a1:4a:b4:84:44:7a:41:95:ca:d8: ed:32:b8:3b:4a:2b:7a:f4:61:d0:ec:be:52:a2:45: 4e:db:9a:39:fb:16:b6:7b:a3:3d:e6:73:85:8d:59: 6b:0c:fc:00:e8:72:bd:56:21:5f:ec:bb:9a:c8:cc: 33:13:26:58:b0:b7:72:9a:48:cb:6e:99:20:2b:42: 9c:cb:af:d1:a6:d5:1c:a2:bc:ac:dc:62:d4:9b:63: 53:10:0a:aa:87:93:f0:7d:1f:d4:0b:57:83:00:ca: e5:b3:c8:c5:7a:8a:c0:5a:bc:e5:7e:b3:31:76:aa: 33:52:bc:6f:6c:a9:d3:18:1a:a5:1a:8c:12:27:df: 20:03:85:55:49:7c:04:16:20:92:3c:96:24:16:7a: 04:e8:72:b2:a5:6b:13:57:7c:e1:61:9c:86:99:7a: fe:86:ae:1e:1a:23:1c:34:d5:1d:8e:be:27:7d:3a: c7:87:c9:8e:a1:a6:ab:f6:dc:26:ae:8c:1d:41:59: 66:98:98:9c:56:13:45:0f:a0:38:8a:5b:63:75:b6: 3f:7c:97:23:2c:b5:3d:85:ed:ae:47:05:91:46:0f: d9:03:9c:3b:df:cc:0a:22:81:d9:55:62:4e:8b:88: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EE:BF:0E:FF:25:70:1C:B5:9C:19:03:8E:55:10:D8:73:41:52:A3 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a34a1cd9-a6e1-4f90-a908-a66252462eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c15::/48 Signature Algorithm: sha256WithRSAEncryption 5c:ca:6c:0f:e2:ef:c8:cd:ad:16:d8:3f:fe:dc:53:5b:0e:c8: 98:2d:b9:0e:f5:ab:5f:43:27:46:ec:2b:ab:03:1f:ef:2e:b7: ca:c0:45:7d:69:37:cd:15:9f:d2:08:a0:25:aa:9d:ce:6a:b5: aa:03:8d:33:89:ca:05:1e:44:9e:85:0e:70:f8:6b:ef:b6:08: d7:c3:02:94:51:95:de:6b:b2:b8:ff:3a:08:cd:f7:17:b3:b7: b6:69:37:66:25:34:93:3f:8d:1f:0d:8b:a3:ff:d4:a8:35:d2: 5e:dc:9a:2e:28:8e:3a:3a:8c:c3:68:ff:7f:a9:fa:67:9a:c9: a2:e4:69:16:ad:ac:a6:7f:ee:9c:c7:d5:53:17:03:28:63:2a: c0:b0:7f:7a:18:f9:13:de:ef:24:cf:26:b6:b0:cf:00:50:dc: ec:92:a3:f9:37:9c:ed:c6:36:5a:3f:cd:04:28:e7:b1:de:6b: 16:99:55:06:d6:bc:43:25:27:f4:01:0b:b4:82:c9:fe:e0:ef: a2:f4:67:dc:66:58:e5:ac:a5:cf:a4:ab:d8:cc:7a:94:7c:ff: 83:f9:a1:79:cc:fa:87:b7:3f:bf:f4:d7:4c:f0:c7:1c:d2:91: b7:0e:4d:28:81:2c:a5:8c:1c:8c:2f:35:4e:9a:0c:b2:ff:f1: b6:eb:4c:f1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTr580RmCTVp0L3t2afXXZKktixAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDA0MDQxWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlY2Q3YmY4OGYwNjYxYzI5ZDM2MjliMzAwNjFlZjkzMWFi ZTJjNTQ0NzBmNDZlOThlNjhkYTU5Y2Y0YjdlNDlmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLGOT3skzo+hMewh9sffDQ98AMoUq0hER6QZXK2O0yuDtK K3r0YdDsvlKiRU7bmjn7FrZ7oz3mc4WNWWsM/ADocr1WIV/su5rIzDMTJliwt3Ka SMtumSArQpzLr9Gm1RyivKzcYtSbY1MQCqqHk/B9H9QLV4MAyuWzyMV6isBavOV+ szF2qjNSvG9sqdMYGqUajBIn3yADhVVJfAQWIJI8liQWegTocrKlaxNXfOFhnIaZ ev6Grh4aIxw01R2Ovid9OseHyY6hpqv23CaujB1BWWaYmJxWE0UPoDiKW2N1tj98 lyMstT2F7a5HBZFGD9kDnDvfzAoigdlVYk6LiB59AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvO6/Dv8lcBy1nBkDjlUQ2HNBUqMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2EzNGExY2Q5LWE2ZTEtNGY5MC1hOTA4LWE2NjI1MjQ2MmVhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBUwDQYJKoZIhvcNAQELBQADggEBAFzKbA/i78jNrRbYP/7cU1sO yJgtuQ71q19DJ0bsK6sDH+8ut8rARX1pN80Vn9IIoCWqnc5qtaoDjTOJygUeRJ6F DnD4a++2CNfDApRRld5rsrj/OgjN9xezt7ZpN2YlNJM/jR8Ni6P/1Kg10l7cmi4o jjo6jMNo/3+p+meayaLkaRatrKZ/7pzH1VMXAyhjKsCwf3oY+RPe7yTPJrawzwBQ 3OySo/k3nO3GNlo/zQQo57HeaxaZVQbWvEMlJ/QBC7SCyf7g76L0Z9xmWOWspc+k q9jMepR8/4P5oXnM+oe3P7/010zwxxzSkbcOTSiBLKWMHIwvNU6aDLL/8bbrTPE= -----END CERTIFICATE-----Generated at Sun Jun 29 00:11:14 2025 by rpki-client